Kerio Connect 7 10 users SUB User guide

Kerio Connect

Step-by-Step

Kerio Technologies

This guide provides detailed description on Kerio Connect, version 7.0. All additional

modiﬁcations and updates reserved.

For current versions of the product and related manuals, check

http://www.kerio.com/mailserver/.

Information regarding registered trademarks and trademarks are provided in appendix A.

Contents

1 Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4

1.1 Before you start . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5

2 Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7

2.1 Windows . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7

2.2 Mac OS X . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7

2.3 Linux . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8

2.4 Conﬁguration Wizard . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8

3 Server conﬁguration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10

3.1 Running Kerio Connect . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10

3.2 Administration interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10

3.3 Setting domain and user accounts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11

3.4 Setting connection to the Internet and to the SMTP server . . . . . . . . . . . . . . . . . 12

3.5 Antispam control of the SMTP server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13

3.6 Antivirus control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13

3.7 Email backup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14

3.8 How to create and manage resources . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15

3.9 How to set public folders . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16

4 Settings of client applications and connection to Kerio WebMail . . . . . . . . . . . . . . . 18

4.1 Connection to Kerio WebMail . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18

4.2 MS Outlook settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18

4.3 MS Entourage settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19

4.4 Synchronization with mobile devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20

A Legal Notices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21

Chapter 1

Introduction

This document is a simple guide focused on description of Kerio Connect conﬁguration applied

immediately upon its ﬁrst installation and startup in the network. To make the guide as

comprehensible as possible, let us see an exemplary implementation of Kerio Connect (see

ﬁgure 1.1):

Figure 1.1 Example of Kerio Connect implementation

1. Install Kerio Connect on a separate server (no other services will be run on it) and run it in

a local ﬁrewall-protected network.

2. Kerio Connect will be connected to the Internet via a leased line. Email will be received and

sent vie SMTP. For this reason, it is necessary to enable antivirus and antispam control.

3. Kerio Connect will be used for a single domain called company.com. The server will be

installed and run in the local network, on a host with IP address 192.168.1.10 and DNS

name mail.company.com.

4. In the internal user database, there will be created only one local account used for

administration of Kerio Connect. Any other user accounts will be mapped from the Mi-

crosoft Active Directory directory service (the same method can be used for the Apple

Open Directory).

1.1 Before you start

Name of the Active Directory domain will be the same as the name of the email domain

and the name of the Kerberos realm.

5. The server will be available both from the local network and from the Internet. For security

reasons, however, only SSL/TLS-secured Internet connections will be allowed.

6. All undelivered email (messages where the part preceding the @ symbol in the address is

not valid) will be sent to [email protected].

7. Enable the Kerio Connect’s dual antivirus control. We will use the integrated McAfee

antivirus (license of Kerio Connect with McAfee is required) and the external Clam An-

tiVirus which will be installed on the same computer as Kerio Connect.

8. All email will saved and backed-up in a local archiving folder once a week.

9. In the system, add resources shared across the company (company cars, meeting rooms,

projectors, etc.) so that users can reserve them.

10. Set a public calendar folder where company events which should have been shared and

known by all employees across the company can be added. Ritghs to add new events will

be assigned to the company’s receptionist. Now set a public contact folder which can be

used only by members of the sales department who can add company customers contacts

in it.

11. To access their email, users will use Kerio WebMail, Kerio Outlook Connector (Oﬄine Edi-

tion), MS Entourage and an ActiveSync-based application for direct access to the mailbox

from their mobile devices.

The exemplary conﬁguration can be easily customized. For detailed information on setting

of individual features of Kerio Connect, refer to Kerio Connect 7, Administrator’s Guide,

chapter

Deployment Examples. The whole document can be downloaded from the Kerio Tech-

nologies website at http://www.kerio.com/mailserver/manual.

1.1 Before you start

Before you start the installation and conﬁguration, prepare your environment as follows:

Set DNS MX records

Although Kerio Connect is located in a private network, email will be sent and received to and

from the Internet. Therefore, it is necessary to set the corresponding record in the public

DNS for a public IP address assigned by the provider (in this example, the 215.75.128.33 IP

address will be used). In the local network it is necessary to assign the mail.company.com

name the local IP address 192.168.1.10. Private address can be set on the local DNS server.

Chapter 1 Introduction

A public server can be as the following example:

company.com MX 10 mail.company.com

mail.company.com A 215.75.128.33

You should also set a record for your backup mail server, if you have one available.

Firewall conﬁguration

Kerio Connect is installed in a local network behind a ﬁrewall. In addition to the mailserver’s

conﬁguration, it is also necessary to perform corresponding additional settings of the ﬁrewall.

If the mailserver is to be accessible from the Internet, certain ports have to be opened (mapped)

in the ﬁrewall. Each mapped port might introduce security problems. Therefore, map ports

only for those services which you want to make available from the Internet.

In the case of our network environment, it is necessary to map port 25 (a default port for the

SMTP service). This setting is required for cases where an MX record for the particular domain

is addressed to the server. Any SMTP server on the Internet can connect to your SMTP server

to send email to one of its domains. For this reason access to the mapped port 25 must not

be restricted to particular IP addresses.

Now, it is necessary to map ports that will be used for connections out of the local network.

Since the security risk is higher here, only SSL/TLS-secured services will be mapped. Settings

are shown in table 1.1.

Service (default port) Outgoing connection Incoming connection

SMTP (25) allow allow

SMTPS (465) allow allow

POP3 (110) allow deny

POP3S (995) allow allow

IMAP (143) allow deny

IMAPS (993) allow allow

NNTP (119) allow deny

NNTPS (563) allow allow

LDAP (389) allow deny

LDAPS (636) allow allow

HTTP (80) allow deny

HTTPS (443) allow allow

Table 1.1 Services to be allowed on the ﬁrewall

Chapter 2

Installation

Kerio Connect supports three types of operating systems. You can choose from Windows, Mac

OS X and Linux.

List of versions (or distribution packs) of the operating systems supported by Kerio Connect

can be found at Kerio Technologies website (Kerio Technologies).

It is necessary to install a special additional installation package on any operating system

(as for Linux, two packages are in question). For any type of installation package ﬁle, check

http://www.kerio.com/mailserver/download.

Once a corresponding installation package is downloaded, the installation can be started.

Installations diﬀer by operating system:

2.1 Windows

Once the installation package is downloaded, run the installation under a user with

administration rights for the operating system.

Standard wizard is used for the installation. Kerio Connect is installed under the following

directory:

C:\Program Files\Kerio\Mailserver

When the installation is completed, the conﬁguration wizard is started (see section 2.4).

2.2 Mac OS X

Once the installation package is downloaded, run the installation under a user with

administration rights for the operating system (the installation program requires

authentication). The installation package is opened as a disk in the Finder application and an

executable installation ﬁle is oﬀered.

In the standard installation wizard select the Easy Install option to start complete installation

of the product to the /usr/local/kerio/mailserver directory.

When the installation is completed, the conﬁguration wizard is started (see section 2.4).

Chapter 2 Installation

2.3 Linux

Kerio Connect is distributed in two RPM or DEB packages which include the server and the

administration console.

The installation must be performed by a user with root rights. Kerio Connect En-

gine is installed to /opt/kerio/mailserver and the Kerio Administration Console to

/opt/kerio/admin.

To install RPM packages, use this command:

# rpm -i <installation_file_name>

In case of the recent versions of the distributions, problems with package dependencies might

occur. In this case, install package compat-libstdc++

To install DEB packages, use this command:

# dpkg -i <installation_file_name.deb>

It is recommended to read carefully the LINUX-README ﬁle immediately upon the installation.

The ﬁle can be found in

/opt/kerio/mailserver/doc

2.4 Conﬁguration Wizard

Since the identical conﬁguration wizard is used for all operating systems, the following

instructions also apply to all of them:

On Windows and Mac OS X, the conﬁguration wizard is opened automatically upon a successful

installation of Kerio Connect. On Linux, it is necessary to run the wizard by using the following

command:

./cfgwizard

Launch the command from the folder where Kerio Connect is installed (typically

/opt/kerio/mailserver).

Warning: The Kerio Connect Engine must be stopped while the conﬁguration wizard is running.

The following parameters are to be set in the conﬁguration wizard:

1. On the ﬁrst page, create an email domain (a unique domain identiﬁcator which is used

to recognize to which server mail should be delivered. In email addresses, the domain

identiﬁcator follows the "at" symbol (@) and enter the server’s Internet hostname. The

Internet name of the server is a DNS hostname where Kerio Connect is installed. Server

names are used for server identiﬁcation while establishing SMTP traﬃc.

Warning:If Kerio Connect is running behind NAT, enter the Internet server name that can

be converted to the IP address of the sending server, i.e. the Internet hostname of the

ﬁrewall.

2. In the next step of the wizard, create an administration account. Keep the Admin as name

and enter password. Memorize the name and password deﬁned in this dialog well since

they will be later used for authentication to theKerio Connect’s administration console.

2.4 Conﬁguration Wizard

3. The next dialog of the wizard allows setting of location of the data store. In this directory,

all user accounts and server logs will be stored.

4. In the last dialog, a summary of the parameters just set is provided. When this dialog is

closed, a notice of the successful completion of the installation is displayed.

Chapter 3

Server conﬁguration

3.1 Running Kerio Connect

On Windows and Mac OS X, Kerio Connect is automatically started upon a successful

installation, while on Linux, the server must be run by hand.

Starting and stopping of the server depends on the operating system where Kerio Connect is

installed, as follows:

Windows

To run Kerio Connect, use the icon which appeared in the notiﬁcation area of the system

toolbar.

To open a pop-up context menu, right-click on the icon. The Start/Stop Kerio Connect

options can be used to either run or stop the server.

Linux

The following commands can be used to stop, run or restart Kerio Connect:

/etc/init.d/kerio-connect start

/etc/init.d/kerio-connect stop

/etc/init.d/kerio-connect restart

Mac OS X

On Mac OS X, Kerio Connect can be started or stopped by using the Kerio Connect Monitor

(its startup icon is available in the Other section of System Preferences). Username which

must belong to the Admins group and password is required for stopping or running of

the service. Once authenticated, clicking Stop or Start is suﬃcient.

3.2 Administration interface

Kerio Connect is conﬁgured through the Kerio Connect Administration interface. Kerio Connect

Administration uses secure protocol HTTPS and runs on port 4040.

To access this interface, simply enter the following address into your browser

http://DNS.server.name/admin (http://IP.address/admin if the name

is not set in DNS) and Kerio Connect will automatically redirect itself to

https://DNS.server.name:4040/admin (https://IP.address:4040/admin).

This implies that the URL can have the following form:

http://mail.company.com:4040/admin or https://192.168.1.1:4040/admin

If a correct URL is entered, authentication page is opened requiring username and password

of the primary administrator that was speciﬁed in the conﬁguration wizard.

3.3 Setting domain and user accounts

Upon the ﬁrst authentication, a product registration dialog is displayed. It is possible to

is available for any registered version. This support is available during the whole period of the

product’s validity, either of the full or of the trial version.

Note: For connection to the interface, it is also possible to use Kerio Administration Console,

the desktop application. For detailed guidelines for usage of the administration console, refer

to Kerio Connect 7, Administrator’s Guide.

3.3 Setting domain and user accounts

Email domains are conﬁgured in the Conﬁguration → Domains section. This section already

includes the domain created in the conﬁguration wizard.

Mapping of user accounts and groups from a directory service

1. On the domain server, install the Kerio Active Directory Extension which is available for

free at the Kerio Technologies website. This application extends the directory service by

certain Kerio Connect’s features.

2. In the Kerio Connect’s administration interface, open the Conﬁguration → Domains

section.

Open the domain created within the installation by clicking on the Edit.

3. Go to the Directory Service tab and enter domain server’s information. Enable mapping by

checking the Map user accounts and groups from a directory service to this domain option.

Select Active Directory as the directory service type. In the Hostname entry, specify DNS

name or IP address of the domain server. Use the Username entry to specify a username

with read and write rights for the Active Directory’s LDAP database.

Use the Test connection button to test whether all parameters have been set correctly to

allow Kerio Connect connect to the Active Directory’s domain controller.

4. Switch to the Advanced tab. It is necessary that Kerberos realm is deﬁned in the Kerberos

5 entry on this tab. The upper-case is set automatically for the name.

Once mapping is set, open the Accounts → Users section. User list will include all mapped

users and one local account for Kerio Connect administration.

The user groups can be mapped in a similar way as users. Groups are administered in Accounts

→ Groups.

Chapter 3 Server conﬁguration

Setting an alias for undeliverable email

Aliases can be deﬁned in the Accounts → Aliases section.

1. Click on Add.

2. This opens a dialog where a new alias can be added. In the Alias entry, enter the

symbol.

In the E-mail address textﬁeld specify the address of the mailbox where any undeliverable

email will be sent (in our case it is [email protected]).

3. Once the alias is saved, you can test it by the Check address button available in the Aliases

section.

The alias for undeliverable mail (or star alias) is used when the part of the e-mail address

before @ sign is not found among domain’s user names and aliases.

3.4 Setting connection to the Internet and to the SMTP server

Anyone can connect to the SMTP server to send messages to local domains. Sending of

messages to other domains will be restricted to local users only. Users connected from the

Internet will be prompted to authenticate on the SMTP server by username and password. This

setting can be done on the Relay Control under Conﬁguration → SMTP server:

1. On the tab, enable the Allow relay only for option.

Warning:It is strongly recommended not to switch the SMTP server to the Open Relay

mode if Kerio Connect is available from the Internet (i.e. it uses a public IP address and

port 25 is not blocked by a ﬁrewall). If you set the Open Relay mode, Kerio Connect will

very probably be abused by spammers to distribute spam mail which will overload your

internet line. This might also cause that your server will be included in blacklists of SMTP

servers.

2. Check option Users from IP address groups and select the Local Clients group which

includes all private ranges of IP addresses.

3. Enable option Users authenticated through SMTP for outgoing mail to allow users

connected from the Internet send email.

Note: Authentication against the SMTP server must be set in the email client. Settings of

some popular clients are focused in chapter 4.2).

Now go to Security Options to set security restrictions for the SMTP server:

1. Set the Maximum number of messages from one IP address per hour option to 100

messages.

2. Set 20 in option Maximum number of concurrent connections to the SMTP server from one

IP address.

3.5 Antispam control of the SMTP server

3. Set Max. number of unknown recipients to 10.

4. In Do not apply these limits to IP address group, set Local clients. This will exclude

Kerio Connect users from these rules. If you use private IP addresses in your internal

network, you can simply choose Local Clients group where all private IP addresses ranges

are deﬁned.

Details on security of the SMTP server can be found in chapter SMTP server of the Kerio Con-

nect 7, Administrator’s Guide.

3.5 Antispam control of the SMTP server

The SMTP server is accessible from the Internet and, therefore, it is necessary to conﬁgure

an antispam control of the SMTP server. Antispam ﬁlters can be set under Conﬁguration →

Content Filtering → Spam Filter:

1. Antispam rating can be started and set on the Spam Rating tab. Default settings of this

tab can be kept.

2. On the Blacklists tab, it is recommended to enable control involving Internet spammer

databases and to set +2 points as a score for each database.

3. Switch to the SpamAssassin tab and enable option Check every incoming message in Spam

URI Realtime Blocklist (SURBL) database.

4. On tabs Caller ID and SPF, set control of e-mail policy records of the sender SMTP server

and set the spam score to +2 points. This control allows to ﬁlter out messages with fake

sender addresses.

5. On the Spammer Repellent tab, enable SMTP connection delay (keep the predeﬁned value

of 25 secons). This ﬁlter eﬃciently stops spam messages at the SMTP level which relieves

the server from a remarkable volume of spam testing.

Antispam ﬁlters of the SMTP server are focused in the Kerio Connect 7, Administrator’s Guide,

chapter Antispam control of the SMTP server.

3.6 Antivirus control

Another necessary settings of Kerio Connect to be done are enabling of the antivirus control

and attachment ﬁlter that can be performed in the following sections:

Chapter 3 Server conﬁguration

Antivirus

Kerio Connect allows to set various conﬁguration options of antivirus control. Kerio Con-

nect can be purchased in versions either with or without the integrated McAfee antivirus. In

addition to that, Kerio Connect supports a respectful number of external antiviruses (for the

list of supported antivirus applications, see the Kerio Technologies website). This implies that

it is possible to use either the integrated McAfee antivirus or any of the supported external

antiviruses. The strongest protection option is to combine the built-in McAfee with an external

antivirus. As promised in the introduction chapter 1, below you can ﬁnd description of

combination of Kerio Connectu with the built-in McAfee with the external Clam AntiVirus.

Antivirus check can be enabled under Conﬁguration → Content Filter → Antivirus:

1. Check that the Use the integrated McAfee antivirus engine option is running.

2. On the Kerio Connect’s host, install the external Clam AntiVirus.

3. Under Conﬁguration → Content Filter → Antivirus, enable option Use external antivirus

and select Clam AntiVirus in the menu.

Attachment Filter

To set attachment ﬁlter, go to the Conﬁguration → Content Filter → Attachment Filter section

and check the Enable attachment ﬁlter option.

In the list, it is also possible to add/remove other attachments to be ﬁltered and use the Add

button to add attachment types which are not included in the list yet.

3.7 Email backup

Email backup and archiving can be set under Conﬁguration → Archiving and Backup.

Email archiving

Email archiving can be set on the Archiving tab:

1. To enable archiving, check the Enable mail archiving option.

2. The default path to the directory can be kept.

3. Enable the Archive to local folder option.

4. Set the interval used for creating of new archive folders to one week.

Archiving folders will be displayed in the Kerio Connect’s administrator mailbox. They can be

viewed, for example, in the Kerio WebMail interface.

3.8 How to create and manage resources

Backup of the data store and conﬁguration ﬁles

Backup can be set on the Backup tab:

1. The backup can be enabled by checking the Enable message store and conﬁguration recov-

ery backup option.

2. In the Backup scheduling table, set one full backup for Sunday midnight so that the backup

does not burden the server within working hours.

3. In the Backup directory entry, specify the path to the directory where backups will be

stored. The path must be entered in a way in accordance with convenience of the operating

system where Kerio Connect is running.

4. Enter your email address in the Email address ﬁeld. Kerio Connect will automatically

generate results of each backup and send it to the address deﬁned.

3.8 How to create and manage resources

Kerio Connect allows reservation of various resources (company cars, meeting rooms and other

equipment). To make reservations work, it is ﬁrst necessary that each resource has its own

calendar created. In other words, it is necessary to create all resource items in Kerio Connectu

via the administration interface, section Accounts → Resources:

1. Click on Add.

2. In the dialog on the General tab, enter a name for the resource. The name will be also used

as the part of the resource’s email address preceding the at symbol. Therefore, diacritics,

blanks and special symbols are disallowed.

3. In the Type entry, select one of the options (room or equipment).

4. Go to the Permissions tab and add all users who will be allowed to book the particular

resource item.

5. Set a reservation manager. This user is allowed to operate with the resource calendar. The

resource manager can delete or move reservations.

Once a resource has been created, check in Kerio WebMail or your email client:

• that the resource’s free/busy calendar is showed while you are trying to use it in an

appointment creation process,

• that the resource calendar can be subscribed by standard sharing process,

• that the Resources folder has appeared in public folders, including contacts of all

created resources so that users can add them easily while creating appointments.

Chapter 3 Server conﬁguration

Resource reservation is focused in Kerio Connect 7, Administrator’s Guide and

Kerio Connect 7, User’s Guide

3.9 How to set public folders

Kerio Connect supports public folders. This feature can be used to create a public company

calendar called Events and a public folder labelled Customers with contact information of the

company’s customers but with view/edit rights assigned to your sales department only.

Notes:

• Public folders are special folders that is displayed in mailboxes of all users of the

particular domain with corresponding reader rights (obviously, access rights can be

edited).

• Public folders can be created and edited only by users with special access rights.

?Upon installation of Kerio Connect, these rights are assigned only to the primary

administrator.

Public calendar

1. Log on to the Kerio WebMail interface as your Kerio Connect primary administrator (use

name and password speciﬁed in the server installation’s conﬁguration wizard).

2. In the folder tree, right-click on Public Folders.

3. In the pop-up context menu just opened, click on New subfolder and enter Events as the

calendar name and Calendar as the type of the new public folder.

4. Right-click the new folder and choose Access rights from the pop-up menu.

5. By default, all users of the domain have read rights for the folder. Keep this setting and

click on Add.

6. In the Sharing type menu, keep the User option and in the Username entry, specify email

address of the calendar administrator (in our example, this will be the receptionist). Click

on OK.

7. In the permission rights table, select the Administrator permission level for the user.

Customer contact list

1. In the Kerio Connect administration interface, go to Accounts → Groups and create a group

called SALES that will include all users from your sales department.

2. Log on to the Kerio WebMail interface as your Kerio Connect primary administrator (use

name and password speciﬁed in the server installation’s conﬁguration wizard).

3.9 How to set public folders

3. In the folder tree, right-click on Public Folders.

4. In the pop-up context menu just opened, click on New subfolder and enter Customers as

the calendar name and Contacts as the type of the new public folder.

5. Right-click the new folder and choose Access rights from the pop-up menu.

6. By default, all users of the domain have read rights for the folder. Cancel this setting and

click on Add.

7. In the Sharing type menu, select the Group option and in the Group name entry add the

SALES group email address. Click on OK.

8. In the access rights table, set the Editor permission level for the group (members of the

group will be allowed to add, remove and edit contact items in the folder).

Chapter 4

Settings of client applications and connection to

Kerio WebMail

Users will connect to the server via the Kerio WebMail interface or use a supported MS Out-

look (on Windows) or MS Entourage (on Mac OS X) clients. The following sections include

instructions on how to connect to Kerio WebMail and how to set email clients optimally.

4.1 Connection to Kerio WebMail

To access the HTTP service using a web browser, insert the IP address (or the name if it is

contained in DNS) of the computer where Kerio Connect is running. A protocol has to be

speciﬁed in the URL — either HTTP for non-secured access or HTTPS for SSL-encrypted access.

The URL will be as follows: http://mail.company.com or https://mail.company.com.

It is recommend to use the HTTPS protocol for remote access to the service (simple

HTTP can be tapped and the user login data can be misused). By default, the HTTP

and HTTPS services use the standard ports (80 and 443). If the standard ports are

changed, specify the port number in the URL address: http://mail.company:8000 or

https://mail.company.com:8080.

Note: The description above focuses accessing email via PDA devices. If connection of the

PDA device to Kerio Connect fails, it is possible that it chooses a wrong connection (it tries

to connect to the full version instead of Kerio WebMail Mini). In this case, simply enter the

following URL: https://mail.company.com/pda.

If the a correct URL is entered, authentication page is opened requiring username and

password. Click on Connect to connect to the account.

4.2 MS Outlook settings

Kerio (MAPI) account — Kerio Outlook Connector (Oﬄine Edition)

Install and conﬁgure the account as follows:

1. On the client station, install MS Outlook (currently supported versions are listed at the

Kerio Technologies website).

2. Install Kerio Outlook Connector (Oﬄine Edition) on the same station.

3. Login to Kerio WebMail (see section 4.1) and select Integration with Windows in the Settings

menu.

4.3 MS Entourage settings

4. Click on the Click here to auto-conﬁgure Kerio Outlook Connector link.

5. Depending on your browser and its settings, the tool gets downloaded and launched

automatically or it only gets downloaded and you can run it by double-clicking on the

tool’s icon.

6. The script now runs MS Outlook, creates a new proﬁle and preconﬁgures your Kerio

account.

7. For security reasons, enter only your user mailbox password. Once the password is set,

conﬁguration of MS Outlook is completed.

POP3 and IMAP account

To set an IMAP/POP3 account in MS Outlook, follow these guidelines:

1. A particular POP3 or IMAP account is set withing creation of the proﬁle in MS Outlook.

2. In the new account wizard, opened automatically upon setting a name of the new proﬁle,

select POP3 or IMAP.

3. Set the E-mail and Internet Settings section carefully. In the Name entry, specify ﬁrst

and second name of the user, and enter the user’s address in the E-mail Address ﬁeld.

Specify username in the Username entry. If the user does not have an account in

the primary domain, it is necessary to use full username including the domain name:

[email protected]. Specify Password that will be used for connection to Kerio Con-

nect. Finally, enter the DNS name or IP address of the server where Kerio Connect is

running in the Incoming mail server and Outgoing mail server (SMTP) entries.

4. If the user connects from the Internet, it is necessary to set authentication in accordance

with the conﬁguration of the SMTP server (see section 3.4). Click on Advanced settings.

This opens a dialog including several tabs where other parameters of the account can be

set. Switch to the Outgoing mail server tab, enable the My outgoing server (SMTP) requires

authentication option and select Use the same settings as my incoming mail server.

5. Run MS Outlook in the new proﬁle.

Note: These instructions can be also used for any email client which supports IMAP and POP3

protocols.

4.3 MS Entourage settings

Kerio Connect uses an interface for MS Exchange in MS Entourage and thus it allows work

with groupware data (email, calendar, contacts and public email folders), use the Free/Busy

server, connect to various LDAP databases for contact searching, etc. The account can be set

as follows:

1. Install a supported version of MS Entourage and run it.

Chapter 4 Settings of client applications and connection to Kerio WebMail

Note: For updated list of supported versions of MS Entourage, refer to

the Kerio Technologies website.

2. Login to Kerio WebMail (see section 4.1) and select Integration with MAC OS X in the Set-

tings menu.

3. Click on Auto-conﬁgure Entourage.

4. The tool gets downloaded and starts automatically.

5. The installation requires username and password for an account with administration

rights for the computer.

6. Once installation is completed, an MS Entourage dialog is opened where you are supposed

to authenticate with your mailbox password. Enter the password and conﬁrm the dialog.

7. Finish the wizard to complete MS Entourage conﬁguration.

4.4 Synchronization with mobile devices

Kerio Connect supports the ActiveSync protocol for direct data synchronization with mobile

devices (for the list of currently supported devices, see the Kerio Technologies website).

This protocol allows synchronization of email, events, contacts and tasks. Implementation

of ActiveSync applications can vary on individual mobile devices. However, each device

includes conﬁguration of the ActiveSync account requiring the following information to make

connection to the mailserver feasible:

1. It is necessary to enter DNS name or IP address of the server where the mailserver is

running.

2. Login username and password for connection to the particular Kerio Connect account is

required.

3. Account settings require speciﬁcation of the email domain where the user is created on

the server.

4. If your security policy requires SSL communication, you will need to import an SSL

certiﬁcate issued by a trustworthy certiﬁcation authority or at least a self-signed one (such

certiﬁcate can be created in Kerio Connect) to the device. Installation of the certiﬁcate on

the device is easy, as suggested int he guidelines below:

1. In a browser on the mobile device enter the address where Kerio Connect is running

(the same address you use for connection to the Kerio WebMail interface — see

section

4.1).

2. At the Kerio WebMail login page, use the Install SSL certiﬁcate link provided below the

If certiﬁcate fails to be installed in this way, make another attempt by using guidelines

provided in

Kerio Connect 7, Administrator’s Guide

Page is loading ...

Kerio Connect 7 10 users SUB User guide

Related papers

Other documents